75c3162e4b470d8daeb478d7ea4ac303826fd32309883f4dea037ffb73d5f153 | Triage

Sharing

General

Target

ab247914db0b9f4cee0c9d82af1cd7bc_JaffaCakes118
Size

100KB
Sample

240819-qck3kayfjk
MD5

ab247914db0b9f4cee0c9d82af1cd7bc
SHA1

d4e7fedff99c4e744297e81b2d232d3a756f10b1
SHA256

75c3162e4b470d8daeb478d7ea4ac303826fd32309883f4dea037ffb73d5f153
SHA512

bc1aececd24a3a9d7f4e9edbabb3b0b9f9794cd973527bc1aabfc471dc80d39b45984b3221ea8244fb5ef811a94764e9fcde7e89078ba78c7a6fb9be610154ca
SSDEEP

1536:G2DcBhyrubM0z5kRHCvOL3RaN+f7ClhMg0Yl5Lgo4zHYRIA:GCcBBg0z5kRHCWLBaIDC7x0YPLgo47Y

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  ab247914db0b9f4cee0c9d82af1cd7bc_JaffaCakes118
- Size
  
  100KB
- MD5
  
  ab247914db0b9f4cee0c9d82af1cd7bc
- SHA1
  
  d4e7fedff99c4e744297e81b2d232d3a756f10b1
- SHA256
  
  75c3162e4b470d8daeb478d7ea4ac303826fd32309883f4dea037ffb73d5f153
- SHA512
  
  bc1aececd24a3a9d7f4e9edbabb3b0b9f9794cd973527bc1aabfc471dc80d39b45984b3221ea8244fb5ef811a94764e9fcde7e89078ba78c7a6fb9be610154ca
- SSDEEP
  
  1536:G2DcBhyrubM0z5kRHCvOL3RaN+f7ClhMg0Yl5Lgo4zHYRIA:GCcBBg0z5kRHCWLBaIDC7x0YPLgo47Y
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation